One of the first things you do when you set up a WordPress site is work on the colors. Then it's time to add data and text. But what about WordPress security? Don't allow the fun of setting up a site that is new distract you from the objective of protecting the information you're putting online.
If you do not have good protection on your site, files can easily get lost. Some of those files may be saved on your computer and easily replaceable, but what about the rest of them? Where are you going to get them out of again, if you lose the first time to them? Especially for sites that have been in business for a very long time, fix wordpress malware protection is vital. Long-term sites have made a large number of files and have a lot of data. Recreating all of that would be a nightmare, and not something any business owner wants to do.
This is great news because it means that there is a strong community of users and developers that can further improve the platform. Whenever there's a group of people attempting to achieve something, there'll always be people who will attempt to take down them.
Yes, you want to do regular backups of your site. I recommend at least a weekly database backup and a monthly "full" backup. More, if possible. If you make regular additions and changes definitely. If you have a community of people which are in there all the time, or make changes multiple times every day, a daily backup should be a minimum.
Now we are getting into official website things. You have to rename it to config.php and modify the file config-sample.php, when you install WordPress. You need to set up the database facts there.
The plugin should be updated have WordPress, play nice with your plugins and to remain current with the latest WordPress release and restore capabilities. The ability to clone your site (along with regular backups) can be helpful if you ever want to do an offline site redesign, among other things.